Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/V7Gy_xsnTYpW1R8jKT-H-yvfeY0.roa
File: V7Gy_xsnTYpW1R8jKT-H-yvfeY0.roa (raw, json)
Hash identifier: t4KBOdzw1W/nTMlVzOh3vHraukfR4inEsZhCZK2WaVE=
Subject key identifier: 57:B1:B2:FF:1B:27:4D:8A:56:D5:1F:23:29:3F:87:FB:2B:DF:79:8D
Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1
Certificate serial: 019F23687B13BB328607C9AE7870A80F0EF1
Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/V7Gy_xsnTYpW1R8jKT-H-yvfeY0.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3209
IP address blocks: 2a01:860::/32 maxlen: 32
2a01:860:1::/48 maxlen: 48
2a01:860:2::/48 maxlen: 48
2a01:860:3::/48 maxlen: 48
2a01:860:4::/48 maxlen: 48
2a01:860:5::/48 maxlen: 48
2a01:860:6::/48 maxlen: 48
2a01:860:7::/48 maxlen: 48
2a01:860:8::/48 maxlen: 48
2a01:860:9::/48 maxlen: 48
2a01:860:a::/48 maxlen: 48
2a01:867::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7b:13:bb:32:86:07:c9:ae:78:70:a8:0f:0e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57b1b2ff1b274d8a56d51f23293f87fb2bdf798d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:13:91:43:26:b0:a9:56:e3:af:a5:bc:04:
1f:9f:c7:da:21:1e:75:fc:9e:3c:7f:3f:a3:19:e8:
b6:5f:3e:eb:df:ec:57:bf:f5:e8:f4:ee:5e:b9:86:
e4:7f:5a:db:45:75:3f:b2:c9:87:85:e9:3e:49:db:
1f:de:10:53:35:7e:91:7d:cb:82:e3:9e:70:91:90:
7e:6f:b4:52:e0:a4:f9:2b:85:9b:af:02:ab:5f:74:
64:87:0e:f9:7b:98:bd:1b:bc:9e:5e:47:a4:b1:c1:
63:2b:99:b4:63:53:4a:70:a1:53:3a:93:6e:0b:72:
a2:bb:e1:72:d9:89:47:94:1c:43:de:f3:f5:ce:f1:
12:c0:e8:6d:16:1b:73:1b:55:25:65:10:d0:e4:bc:
69:ab:f4:62:4e:9a:87:19:eb:00:90:92:d4:6f:dc:
a9:51:b6:83:3e:6f:07:1c:54:57:2b:5a:ec:a9:69:
49:89:77:26:70:bc:44:63:a3:2a:08:5e:43:46:3a:
e8:26:a9:a6:97:9b:b3:32:10:20:25:43:ab:9a:81:
a5:1a:6d:af:1e:f9:64:f6:33:70:4d:54:55:fa:e3:
5f:19:bb:7f:eb:7f:1b:f4:4a:75:b0:c0:84:d0:ca:
d4:a4:ae:b3:4f:e8:9b:22:07:56:bd:76:01:c5:ff:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B1:B2:FF:1B:27:4D:8A:56:D5:1F:23:29:3F:87:FB:2B:DF:79:8D
X509v3 Authority Key Identifier:
keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/V7Gy_xsnTYpW1R8jKT-H-yvfeY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:860::/32
2a01:867::/32
Signature Algorithm: sha256WithRSAEncryption
0a:c9:d3:80:3c:9c:aa:a0:76:d0:86:6a:98:88:dd:e0:b5:e7:
4f:10:99:0c:56:e5:63:5f:fa:b3:f1:3c:4e:fc:e8:84:13:1c:
4f:51:1e:a4:71:d6:8b:7b:35:0a:c1:ca:19:3d:47:d8:41:92:
51:10:57:c4:f0:f5:a2:f7:10:c0:67:fb:92:e0:9e:67:44:58:
3b:f9:29:2f:a6:d5:ee:42:12:54:b5:7e:36:ac:72:de:1f:8e:
44:14:24:c4:85:09:67:ca:3b:01:6e:f1:ef:46:db:7f:f0:7e:
b9:a8:77:e3:33:1e:83:cf:4d:8b:16:80:49:91:56:76:e9:f5:
27:67:52:07:b1:f5:62:61:79:59:c7:db:fe:e9:0f:f5:4a:84:
ee:e5:1f:95:8b:8c:a0:76:ba:1d:86:bf:ca:18:1d:46:aa:c5:
f6:ee:ea:95:35:e5:5b:98:5c:fb:78:36:05:4d:a2:5e:1c:bc:
ed:7f:4b:6b:c5:3a:1d:af:53:21:b3:1e:ca:fc:90:2c:1a:98:
1a:3d:6e:a5:9a:ca:5a:e0:11:6e:1e:77:ad:b2:d7:74:58:29:
72:ce:37:4d:bf:3d:d7:5b:9d:fc:bc:31:47:71:b5:bf:63:ee:
29:76:7a:54:9e:68:57:5a:cd:66:4d:c1:9a:8f:1c:de:4a:7b:
e0:31:d8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:17 2026 by rpki-client